Add basic user setup/authentication

A basic user creation/deletion/authentication flow is required to register accounts/user identities. The user's identity MUST be used to scope responses from endpoints.

The following behaviors need to be implemented:

- User creation via API/web interface
- User basic auth via web interface
- User Oauth2 authentication flow and scope assignment
- Principal filtering of endpoint content